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(57) Abstract: The invention relates to access control for a movable network (15) managed by a mobile router (10), wherein said 
mobile route is interconnected through a bi-directional link (40) with a mobility anchoring agent (20) that anchors the network 
mobility for the mobile router. According to the invention, access control enforcement points (11,21) are located at both the mobile 
router (10) and the mobility anchoring agent (20). Access control is exercised at the mobility agent (20) to filter downlink packets to 
the mobile router (10) and access control is exercised at the mobile router (10) to filter uplink packets to the mobility anchoring agent 
(20). In this way, unauthorized packets, both uplink and downlink, do not have to cross the air interface before being filtered away, 
thereby preventing waste of valuable radio resources. The access control modules are typically provisioned with access control filter 
information, preferably by means of a hierarchical provisioning structure. 
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